2139 matches found
CVE-2018-7439
The CVE-2018-7439 issue affects FreeXL up to version 1.0.4; it is a heap-based buffer over-read in read_mini_biff_next_record. Exploitation could impact confidentiality, integrity, and availability (CVSS3: High). Mitigation: upgrade to FreeXL 1.0.5 or later (per the description). If you need furt...
Heap overflow
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...
CVE-2018-7253
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...
CVE-2018-7253
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...
CVE-2017-17723
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...
CVE-2017-17724
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file...
CVE-2017-17723
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...
CVE-2017-17725
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864,...
CVE-2017-17724
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file...
CVE-2017-17724
CVE-2017-17724 affects Exiv2 up to version 0.26, with a heap-buffer-overflow/heap-based buffer over-read in IptcData::printStructure (iptc.cpp); a crafted TIFF/file can crash the application (DoS). Multiple connected advisories (ALAS2-2019-1339, CentOS/RHSA, etc.) indicate Exiv2 0.27.0 fixes were...
CVE-2017-17725
CVE-2017-17725 : In Exiv2 0.26, an integer overflow in Exiv2::getULong (types.cpp) causes a heap-based buffer over-read. This can be leveraged remotely to trigger a denial of service via a crafted image file. The description indicates a DoS impact but does not provide exploit details beyond the o...
CVE-2017-17725
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864,...
CVE-2017-17723
Exiv2 0.26 contains a heap-based buffer over-read in Image::byteSwap4 (image.cpp) that can disclose memory or cause a DoS via a crafted TIFF. Public advisories (GLSA-201811-14, Fedora/OpenVAS updates) show this requires upgrading Exiv2; Gentoo guidance specifies >=exiv2-0.26_p20180811-r3 as th...
SUSE SLED12 / SLES12 Security Update : freetype2 (SUSE-SU-2018:0414-1)
This update for freetype2 fixes the following security issues : - CVE-2016-10244: Make sure that the parsecharstrings function in type1/t1load.c does ensure that a font contains a glyph name to prevent a DoS through a heap-based buffer over-read or possibly have unspecified other impact via a...
openSUSE Security Update : ImageMagick (openSUSE-2018-145)
This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...
CVE-2018-6612
An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...
Heap overflow
An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...
CVE-2018-6612
CVE-2018-6612 affects jhead, issue arising from an integer underflow in process_EXIF in exif.c that causes a heap-based buffer over-read when parsing JPEGs. Reports across multiple advisories indicate impact on jhead 3.00 and that updates exist (e.g., jhead updated to 3.06.x in several distributi...
Heap overflow
The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...